Whamcloud - gitweb
LU-15047 gss: gss integrity check with multi-rail 77/45277/2
authorSebastien Buisson <sbuisson@ddn.com>
Mon, 18 Oct 2021 11:26:40 +0000 (13:26 +0200)
committerOleg Drokin <green@whamcloud.com>
Wed, 3 Nov 2021 02:37:29 +0000 (02:37 +0000)
commitc8301a65c5672a1d081669343466746df983eabc
treecb62d3b6cb2816f1c4022dcba901953a1edd07d1
parent9997f94d4b6ee335d2bf86f94bd43464d5b8f061
LU-15047 gss: gss integrity check with multi-rail

With multi-rail, a primary NID is used as node identifier, but LNet
decides which NID is actually used for sending/receiving data, on a
per request basis.
For the integrity check mechanism implemented as part of GSS, the
primary NID must be used in order to compute HMAC with the correct
key, independently of the actual NID for the current request.

Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: I2bf3974d3aa0e8365a9413dca56c69ee3734c12b
Reviewed-on: https://review.whamcloud.com/45277
Tested-by: jenkins <devops@whamcloud.com>
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Jeremy Filizetti <jeremy.filizetti@gmail.com>
Reviewed-by: James Simmons <jsimmons@infradead.org>
Reviewed-by: Oleg Drokin <green@whamcloud.com>
lustre/ptlrpc/gss/gss_keyring.c
lustre/ptlrpc/gss/gss_svc_upcall.c